• 3ea6390: [build] record flaky tests on trunk and report weekly offenders to Slack (#17930) (Titus Fortner) #17930
• 62a82fe: [build] ignore .bazelbsp/ IDE-generated directory (#17932) (Diego Molina) #17932
• cf841ff: [adr] Install browser extensions from the driver directly (#17817) (Titus Fortner) #17817
• fadb1e5: [docs] mark ADR 17817 as accepted (Titus Fortner)
• 7eca8c6: [py] generate the internal BiDi protocol layer from the shared binding-neutral schema (#17761) (Titus Fortner) #17761
• 1dd3004: [rb] always reject a missing required inbound BiDi field (#17936) (Titus Fortner) #17936
• 949d4c1: [build] make Java and .NET release reruns pass when already published (#17935) (Titus Fortner) #17935
• 458b8e1: [build] Move dependency updates into a weekly workflow (#17934) (Titus Fortner) #17934

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.534...7.21.0-rc.535

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.533...7.21.0-rc.534

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.532...7.21.0-rc.533

• bugfix: Add rownumber, The extensionelement is missing rownumber. #5024 #5060 by @xzxiaoshan in https://github.com/Activiti/Activiti/pull/5035
• MNT-25496: update the task on every TaskListener (if there are changes) by @vrmoreira in https://github.com/Activiti/Activiti/pull/5260
• MNT-25578: [8.1.x] changed "serial" to "bigserial" column on postgresql database by @andashyland in https://github.com/Activiti/Activiti/pull/5399
• MNT-25678: [8.1.x] Incorrect results in TaskQuery when using variable based conditions by @andashyland in https://github.com/Activiti/Activiti/pull/5497

Full Changelog: https://github.com/Activiti/Activiti/compare/8.1.7...8.1.8

• Bump ch.qos.logback:logback-core from 1.5.34 to 1.5.35 #3838
• Bump ch.qos.logback:logback-core from 1.5.35 to 1.5.36 #3844
• Bump ch.qos.logback:logback-core from 1.5.36 to 1.5.37 #3852
• Bump ch.qos.logback:logback-core from 1.5.37 to 1.5.38 #3864
• Bump com.ibm.db2:jcc from 12.1.4.0 to 12.1.5.0 #3853
• Bump com.oracle.database.jdbc:ojdbc8 from 23.26.2.0.0 to 23.26.3.0.0 #3873
• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9 #3830
• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10 #3876
• Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 #3856
• Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 #3861
• Bump org.springframework.boot:spring-boot-gradle-plugin from 4.0.6 to 4.0.7 #3826
• Upgrade to Spring Framework 7.0.9 #3878
• Upgrade to Spring Security 7.0.7 #3879

• Bump ch.qos.logback:logback-core from 1.5.34 to 1.5.35 #3836

• Bump ch.qos.logback:logback-core from 1.5.35 to 1.5.36 #3841

• Bump ch.qos.logback:logback-core from 1.5.36 to 1.5.37 #3848

• Bump ch.qos.logback:logback-core from 1.5.37 to 1.5.38 #3866

• Bump ch.qos.logback:logback-core from 1.5.38 to 1.6.0 #3869

• Bump ch.qos.logback:logback-core from 1.6.0 to 1.6.1 #3871

• Bump ch.qos.logback:logback-core from 1.6.1 to 1.6.2 #3890

• Bump ch.qos.logback:logback-core from 1.6.1 to 1.6.3 #3891

• Bump com.ibm.db2:jcc from 12.1.4.0 to 12.1.5.0 #3849

• Bump com.oracle.database.jdbc:ojdbc8 from 23.26.2.0.0 to 23.26.3.0.0 #3872

• Bump commons-logging:commons-logging from 1.3.6 to 1.4.0 #3831

• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.13 to 0.0.14 #3839

• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9 #3828

• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10 #3874

• Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 #3855

• Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 #3860

• Bump org.springframework.boot:spring-boot-gradle-plugin from 4.1.0-SNAPSHOT to 4.1.0 #3825

• Bump tools.jackson.core:jackson-databind from 3.1.4 to 3.2.1 #3867

• Bump tools.jackson:jackson-bom from 3.1.4 to 3.2.1 #3868

• Upgrade to Spring Framework 7.0.9 #3880

• Upgrade to Spring Security 7.1.1 #3881

• Add Implicit CorsConfigurationSource/PreFlightRequestHandler Detection to <cors> XML Namespace #19542
• Add Release Announcement Workflows #19573
• Validate account status in OneTimeTokenAuthenticationProvider #17656
• Fix Broken DefaultLoginPageGeneratingFilter Javadoc Link #19252
• Remove BeanResolver Null Checks #19209
• Remove Unnecessary AuthorizationDecision Cast #19283
• Update One-Time Token Docs for Renamed APIs #19274

• Find mixed-case names in InMemoryUserDetailsManager#changePassword #19540
• Correct validation logic in CasAuthenticationToken #19372
• Differentiate Forwarded and X-Forwarded headers in proxy docs #19477
• Fix OAuth2PushedAuthorizationRequestUri parsing #19445
• Update JavaDoc Links in Reference #19199
• Validate Parameter in setPostAuthenticationChecks #19277

• Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.2 #19555
• Bump ch.qos.logback:logback-classic from 1.6.2 to 1.6.3 #19559
• Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 #19565
• Bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 #19462
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.3 to 5.6.4 #19537
• Bump org.seleniumhq.selenium:htmlunit3-driver from 4.43.0 to 4.46.0 #19451
• Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.46.0 #19440

FAILURE: Build failed with an exception.

• Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2 #19560

• Disable CORS Tests Relying on HandlerMappingIntrospector #19543
• Disable Lowercase HTTP Method Firewall Test #19541
• Prepare for Spring Security 7.2 #19527
• Suppress removal Warnings on RestOperations/RestTemplate Usage #19544

Thank you to all the contributors who worked on this release:

@therepanic

• Fix Broken DefaultLoginPageGeneratingFilter Javadoc Link #19252
• Remove BeanResolver Null Checks #19209
• Remove Unnecessary AuthorizationDecision Cast #19283
• Update One-Time Token Docs for Renamed APIs #19274

• Correct validation logic in CasAuthenticationToken #19372
• Differentiate Forwarded and X-Forwarded headers in proxy docs #19477
• Find mixed-case names in InMemoryUserDetailsManager#changePassword #19539
• Fix OAuth2PushedAuthorizationRequestUri parsing #19445
• Update JavaDoc Links in Reference #19199
• Validate Parameter in setPostAuthenticationChecks #19277

• Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs #19503
• Bump actions/checkout from 6.0.3 to 7.0.0 #19351
• Bump actions/checkout from 7.0.0 to 7.0.1 #19464
• Bump actions/setup-java from 5.2.0 to 5.3.0 #19352
• Bump actions/setup-java from 5.3.0 to 5.4.0 #19380
• Bump actions/setup-java from 5.4.0 to 5.5.0 #19430
• Bump actions/setup-java from 5.5.0 to 5.6.0 #19453
• Bump actions/setup-java from 5.6.0 to 5.7.0 #19501
• Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs #19385
• Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 #19374
• Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36 #19389
• Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 #19396
• Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 #19431
• Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 #19467
• Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1 #19476
• Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.2 #19556
• Bump ch.qos.logback:logback-classic from 1.6.2 to 1.6.3 #19564
• Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 #19419
• Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 #19566
• Bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 #19439
• Bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 #19525
• Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 #19322
• Bump com.webauthn4j:webauthn4j-core from 0.31.6.RELEASE to 0.31.7.RELEASE #19313
• Bump com.webauthn4j:webauthn4j-core from 0.31.7.RELEASE to 0.31.8.RELEASE #19409
• Bump com.webauthn4j:webauthn4j-core from 0.31.8.RELEASE to 0.31.9.RELEASE #19496
• Bump gradle-wrapper from 9.5.1 to 9.6.0 #19360
• Bump gradle-wrapper from 9.6.0 to 9.6.1 #19393
• Bump gradle-wrapper from 9.6.1 to 9.7.0 #19516
• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.13 to 0.0.14 #19378
• Bump org-bouncycastle from 1.84 to 1.85 #19437
• Bump org-jetbrains-kotlin from 2.4.0 to 2.4.10 #19447
• Bump org-opensaml5 from 5.2.2 to 5.2.3 #19358
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 #19401
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.3 #19495
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.3 to 5.6.4 #19538
• Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 #19387
• Bump org.hibernate.orm:hibernate-core from 7.4.0.Final to 7.4.1.Final #19312
• Bump org.hibernate.orm:hibernate-core from 7.4.1.Final to 7.4.2.Final #19364
• Bump org.hibernate.orm:hibernate-core from 7.4.2.Final to 7.4.3.Final #19402
• Bump org.hibernate.orm:hibernate-core from 7.4.3.Final to 7.4.4.Final #19416
• Bump org.hibernate.orm:hibernate-core from 7.4.4.Final to 7.4.5.Final #19443
• Bump org.junit:junit-bom from 6.1.0 to 6.1.1 #19395
• Bump org.junit:junit-bom from 6.1.1 to 6.1.2 #19442
• Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #19524
• Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #19519
• Bump org.seleniumhq.selenium:htmlunit3-driver from 4.43.0 to 4.45.0 #19365
• Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.45.0 #19344
• Bump tools.jackson:jackson-bom from 3.2.0 to 3.2.1 #19438
• Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2 #19562
• Release 7.1.1 #19310
• Upgrade to Micrometer 1.17.1 #19489
• Upgrade to Reactor 2025.0.7 #19488
• Upgrade to Spring Framework 7.0.9 #19487
• Upgrade to Spring LDAP 4.1.1 #19491

• Fix Broken DefaultLoginPageGeneratingFilter Javadoc Link #19252
• Remove BeanResolver Null Checks #19209
• Remove Unnecessary AuthorizationDecision Cast #19283
• Update One-Time Token Docs for Renamed APIs #19274

• Correct validation logic in CasAuthenticationToken #19372
• Differentiate Forwarded and X-Forwarded headers in proxy docs #19477
• Find mixed-case usernames in InMemoryUserDetailsManager#changePassword #19337
• Fix OAuth2PushedAuthorizationRequestUri parsing #19445
• Update JavaDoc Links in Reference #19199
• Validate Parameter in setPostAuthenticationChecks #19277

• Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs #19504
• Bump actions/checkout from 6.0.3 to 7.0.1 #19466
• Bump actions/setup-java from 5.2.0 to 5.7.0 #19505
• Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs #19381
• Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.38 #19433
• Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 #19323
• Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 #19391

Thank you to all the contributors who worked on this release:

@ArzMeow, @big-cir, @junhyeong9812, @jyx-07, @ngocnhan-tran1996, @skdas20, @snowykte0426, and @therepanic